Connect with us

Hi, what are you looking for?

A map of airports in the contiguous United States, of which only 30 service around 70% of all domestic flights. NREL, NASA, and others are studying whether future aviation could link a larger number of airports. Image courtesy of NASA


Electric Aviation Is Arriving, & Cybersecurity Is High Priority

Industry Will Face Challenge of Networked Infrastructure Among Many Entities

Airport security is something most people know well — queuing, removing shoes, emptying water bottles. Airport infrastructure cybersecurity, however, is a topic that is still evolving and one that is becoming even more important with the adoption of electric aircraft.

To help protect airport infrastructure, researchers at the National Renewable Energy Laboratory (NREL) have reviewed the cybersecurity needs of electric aviation in a report titled “Addressing Electric Aviation Infrastructure Cybersecurity Implementation.” The report evaluates key cyber needs around electrifying aviation infrastructure and how stakeholders like airlines, utilities, equipment suppliers, and regulators may implement a cybersecurity approach. Although much is still unknown about designing systems for electric aircraft, and strategies could vary widely across the sector, the authors identified common approaches to secure infrastructure early in the design and procurement process.

“This is the starting point for defining responsibilities and identifying potential vulnerabilities,” said Tony Markel, the report’s co-author. “This report can help decision makers plan how to implement cybersecure solutions regardless of the exact electrification strategy.”

Airport electrification is one piece of the puzzle for what the Federal Aviation Administration (FAA) calls advanced air mobility, which ranges from regional flight networks to holistic sustainability. The FAA funded the report as part of a partnership with NREL to better understand the electrical infrastructure needed to support advanced air mobility. Since the FAA regulates air transportation safety throughout the United States, the cybersecurity of incoming infrastructure is important.

Lessons From Electric Vehicles

The core infrastructure of electrification is the charging station, which powers both ground and air vehicles. Charging infrastructure is a challenge for cybersecurity because it serves as both a physical and data interface for multiple equipment vendors, system operators, users, and devices. NREL and other national laboratories that have studied security practices for vehicle chargers are now applying their findings to aviation charging infrastructure.

NREL’s charging-security research is focused on identifying hardware components and information flows, recognizing where vulnerabilities might exist, and assessing the impact and response when actors take advantage of these vulnerabilities. From that background, researchers have assembled mitigation strategies for the electric vehicle sector, including a report on cybersecurity for charging infrastructure, as well as an analysis of cybersecurity for fast-charging infrastructure and lab testing of mitigation strategies.

Meanwhile, vehicle charging use cases at airports are still evolving. It is likely that chargers will be deployed both on the ground for shuttles and operations vehicles while also serving aircraft and their support vehicles. These deployments have the potential to greatly increase the number of connection points, adding new cybersecurity priorities for manufacturers and their infrastructure and for airports managing energy demand with site controls. Overall, the larger cyberattack surface will require expanded coordination between stakeholders.

Many Stakeholders, One Objective: Security

Airports have the appearance of one streamlined operation, but behind the scenes there is much coordination between companies, vendors, and airport divisions; and electrification will demand still more coordination. That creates interesting challenges for cybersecurity because of the interconnectedness of assets — addressing threat activity within small segments could be powerful in preventing significant networkwide impacts.

Electrified aviation requires coordination among a variety of stakeholders, and their data and power connections raise new questions about how to manage cybersecurity. Illustration by Josh Bauer, NREL

The NREL report notes that cybersecurity requirements may vary across stakeholder oversight, depending on ownership models and funding sources. This means that federal guidelines like the National Institute of Standards and Technology Cybersecurity Framework might determine rules in some circumstances, while other cases rely on a mix of industry-accepted standards. Consistency and responsibility will be important across the aviation ecosystem, so that aircrafts traversing sites will not be exposed to vulnerabilities and can rely on a common suite of cybersecurity guidelines.

“It’s very interesting to look at the ownership models for airports to understand the authorization processes from a cybersecurity requirements perspective,” said Anuj Sanghvi, a project lead at NREL. “For asset owners and responsible entities, it will be valuable to have tools that provide insight into authorization processes. There is much work to be done beyond the initial guidance thus far.”

The report addresses this multistakeholder situation by recommending a set of security principles based on existing standards and guidelines. For starters, network segmentation can effectively isolate assets from one another, and firewalls can limit data risks from untrusted network traffic. Technologies like NREL’s Module-OT can stand between assets as a “bump in the wire,” adding authentication via traditional mechanisms like Transport Layer Security, and other solutions such as intrusion detection systems can be scaled to provide visibility and threat monitoring throughout the network.

The report generally recommends putting cybersecurity first: embedded within the planning process and applied throughout technology procurement. Cybersecurity awareness at any facility can begin with assessments like the U.S. Department of Energy Cybersecurity Capability Maturity Model, which identifies vulnerabilities and potential investments for facilities, and the Distributed Energy Resource Cybersecurity Framework to manage the security of energy assets.

Article courtesy of NREL.

Featured Image NASA

Sign up for daily news updates from CleanTechnica on email. Or follow us on Google News!

Have a tip for CleanTechnica, want to advertise, or want to suggest a guest for our CleanTech Talk podcast? Contact us here.

Electrifying Industrial Heat for Steel, Cement, & More

I don't like paywalls. You don't like paywalls. Who likes paywalls? Here at CleanTechnica, we implemented a limited paywall for a while, but it always felt wrong — and it was always tough to decide what we should put behind there. In theory, your most exclusive and best content goes behind a paywall. But then fewer people read it! We just don't like paywalls, and so we've decided to ditch ours. Unfortunately, the media business is still a tough, cut-throat business with tiny margins. It's a never-ending Olympic challenge to stay above water or even perhaps — gasp — grow. So ...
If you like what we do and want to support us, please chip in a bit monthly via PayPal or Patreon to help our team do what we do! Thank you!

The mission of the U.S. Energy Department is to ensure America’s security and prosperity by addressing its energy, environmental and nuclear challenges through transformative science and technology solutions. Learn more.


You May Also Like

Autonomous Vehicles

NREL Inaugurates New Lab, Advancing Pioneering Research Efforts Into the Real World To Improve Mobility Efficiency and Equity Billions of devices around the world...

Clean Power

Lesser Known Than Some of Its Renewable Energy Cousins, Geothermal Energy Is Now on the Rise Thanks to Its Ability To Provide 24/7 Power,...

Clean Power

In October 2021, the city of Frankfort, Kentucky, set a very accelerated and ambitious clean energy goal: to supply 100% clean, renewable electricity to...

Air Quality

Kids are sponges when it comes to learning about renewable energy, and hands-on, experiential activities are fun ways to make zero emissions living tangible.

Copyright © 2023 CleanTechnica. The content produced by this site is for entertainment purposes only. Opinions and comments published on this site may not be sanctioned by and do not necessarily represent the views of CleanTechnica, its owners, sponsors, affiliates, or subsidiaries.